guard CMS + active endpoints with auth strategy

[javamonn]

• [x] understand scala implicits, mixin auth trait
• [x] redirect to auth app (separate bundle from CMS) on failed auth
• [x] implement auth key cookie saving in front end with https://github.com/eXon/react-cookie and https://developers.google.com/web/updates/2015/03/introduction-to-fetch?hl=en